Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa
File: 821b0144-f20d-3232-8bec-514d962865a2.roa (raw, json)
Hash identifier: PJnMocjF76ketNBut9KODaTjsWdFpUUOXmiCxqN8qg8=
Subject key identifier: C4:A6:26:A5:FC:0C:D6:DC:BA:C0:05:30:D8:0B:1D:3A:47:0E:94:03
Certificate issuer: /CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5
Certificate serial: 010D0C9F432858486AC5A02B7EC6256589543800
Authority key identifier: F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 36281
IP address blocks: 192.30.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:a0:2b:7e:c6:25:65:89:54:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=a4a87426-c055-4339-ab52-ed43ffd4fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:78:a9:f4:47:a0:22:0f:68:58:49:1b:a0:
37:aa:67:1a:63:95:1f:ab:45:3d:30:ff:e4:b2:50:
54:98:28:5e:a5:8b:2c:e8:10:ac:0d:4e:57:96:57:
24:59:9d:f4:c1:4b:81:a4:1f:a1:26:a6:fe:e7:5c:
52:70:5e:97:3b:27:05:0d:35:4e:82:b0:59:3f:eb:
e0:78:52:46:bf:63:40:f1:16:db:3b:cb:55:89:1e:
6c:6b:3e:22:32:cc:0f:51:81:0b:ac:53:1f:db:a3:
76:79:bb:0e:ec:86:4e:00:c2:ed:77:aa:4c:54:d8:
be:5f:5c:fb:66:5e:7b:e4:74:b8:e0:57:cd:10:0b:
ca:c4:e9:55:ee:3e:b1:01:57:3f:bb:7f:ec:6f:6f:
fb:9a:6b:5e:d9:68:d4:c1:71:47:25:04:76:44:90:
3d:8a:87:30:2f:61:74:4d:03:37:da:e6:0a:dc:4f:
97:19:28:3d:d8:39:26:c2:f6:7a:66:2f:6e:b6:1f:
30:ea:5c:7f:62:fb:37:b5:89:51:ba:e4:fa:3c:f0:
76:f3:8a:f0:92:11:5e:9a:02:35:4b:74:ce:f4:83:
5d:62:18:b5:81:91:48:2a:17:18:c3:5c:e6:93:1a:
e3:55:e8:18:32:82:31:41:f1:cd:9b:58:bd:d8:8a:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:26:A5:FC:0C:D6:DC:BA:C0:05:30:D8:0B:1D:3A:47:0E:94:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl
X509v3 Authority Key Identifier:
keyid:F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:09:47:89:7a:58:f5:7e:53:33:90:8d:87:90:47:35:60:42:
9f:43:c6:c0:e7:b7:4a:da:dd:08:71:e5:cf:b5:bb:aa:8c:67:
9b:71:86:4e:44:2b:91:4e:4b:df:f4:a2:16:83:e1:99:eb:19:
42:d1:46:17:d3:94:d9:69:09:29:c5:15:b7:b6:03:b3:ec:f9:
7b:a8:2d:c7:50:66:05:94:e7:95:8e:30:83:fc:c4:a8:3f:6f:
43:e5:49:fb:c5:f8:69:0f:d3:a1:fd:8c:d6:a0:a2:11:a3:a3:
91:88:68:c8:de:0a:cc:4b:60:7b:97:cc:9b:6b:48:e9:c6:3f:
94:d7:e6:33:4d:88:bc:de:fb:f7:f5:f4:28:9b:e8:5d:0d:a6:
15:0a:74:c4:fa:c4:04:54:dc:ee:a8:8d:f0:7e:05:c1:ad:62:
96:d1:af:8d:19:93:50:2b:cf:f3:7b:c8:6a:e6:19:43:25:48:
a3:67:bb:fc:d6:d4:60:14:e3:6c:d3:21:eb:31:4e:ec:73:c0:
87:c6:4f:39:d4:75:3c:d5:30:a7:d0:ef:eb:83:82:e2:75:8c:
02:15:41:e0:c0:28:a8:f2:af:0c:18:95:08:2e:1c:d2:4a:01:
42:a4:a2:bb:c2:ab:00:a6:f4:4a:b5:2d:b6:6e:1e:9b:0d:81:
90:19:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:10 2025 by rpki-client